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1 DETAILED ACTION 

2 

3 Claim Rejections - 35 USC § 102 

4 The following is a quotation of the appropriate paragraphs of 35 U.S.C. 102 that 

5 form the basis for the rejections under this section made in this Office action: 

6 A person shall be entitled to a patent unless - 

7 (e) the invention was described in (1 ) an application for patent, published under section 122(b), by 

8 another filed in the United States before the invention by the applicant for patent or (2) a patent 

9 granted on an application for patent by another filed in the United States before the invention by the 

1 0 applicant for patent, except that an international application filed under the treaty defined in section 

1 1 351 (a) shall have the effects for purposes of this subsection of an application filed in the United States 

1 2 only if the international application designated the United States and was published under Article 21 (2) 

13 of such treaty in the English language. 
14 

15 Claims1-4, and 8 -16 are rejected under 35 U.S.C. 102(e) as being 

16 anticipated by Bushi, "Secure Encryption of Data Pacicets for Transmission Over 

1 7 Unsecured Networlcs", U.S. Patent Publication, 2002/0002675 A1 . 
18 

19 Regarding claim 1, Bush discloses: 

20 an identification number associated with ttie data earner (Bush, page 4, pars. 54, 

21 55). Bush discloses a plurality of unique identification numbers that could be associated 

22 with the data earner, such as an account number, bank number, and/or a personal 

23 identification number. 

24 a memory for storing a one-time pad and data, wiierein ttie one-time pad is 

25 uniquely associated wittt ttie identification number (Bush, page 2, par. 25; page. 3, par. 

26 35. lines 4,5). 

27 an encryption circuit, coupled to ttie memory, for encrypting ttie data witti 
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1 the one-time pad (Bush, page 3, par. 35, lines 4,5; page. 5, par. 56, lines 16,17). 

2 and a controller, coupled to the memory, to prevent reuse of bits in the one- 

3 time pad (Bush, page 3, par. 33; page 5, par. 65). 
4 

5 Regarding claim 2, Bush discloses: 

6 wherein the encryption circuit performs an exclusive-or function (Bush, page 3, 

7 par. 40). 
8 

9 Regarding claim 3, Bush discloses: 

1 0 the data carrier of claim 1 further comprising a counter, coupled to the memory, 



1 1 to index to a next bit in the one-time pad (Bush, page 3, par. 32, par. 40). The system 

12 of Bush comprises the encoding/decoding of digital data. Bush discloses that the 

1 3 counter indexes to the next available position in the one time pad, whereupon a XORIng 

14 of the bits of the one time pad and the data will occur. Thus, Bush discloses indexing to 

15 a next bit in the one time pad. 
16 

17 Regarding claim 4, Bush discloses: 

1 8 the data carrier of claim 1 further comprising an interface, wherein the 

1 9 interface comprises at least one of the following: capacitive coupling, inductive 

20 coupling, electromagnetic coupling, optical coupling, electrical coupling, and 

21 contact (Bush, page 5, par. 56). Bush discloses the data carrier embodied as a 

22 PCMCIA device and a contact interface with a receiving device. 



Application/Control Number: 10/025,287 Page 4 

Art Unit: 2137 

1 Regarding claim 7, Bush discloses: 

2 the data carrier of claim 1 wherein the one-time pad is generated by one 

3 of the following: a true random number generator, and a pseudorandom number 

4 generator operating on a secret key and the identification number of the data carrier 

5 (Bush, page 1, par. 7; page 2, par. 30). 
6 

7 Regarding claim 8, Bush discloses: 

8 the data earner of claim 1 for use with a reader, wherein the reader 

9 comprises a generator to generate the one-time pad via one of the following: 

10 a look-up table, and a pseudorandom number generator operating on a secret key 

1 1 and the identification number of the data earner {Bush, fig. 6, elems. 602, 604; page. 5, 

12 par. 59). Bush discloses the carrier-receiver interface being directly attached to 

13 processor 604, thus a device comprising a generator which generates the one time pad 

14 via a look-up table ("list"). 
15 



16 Regarding claim 9, Bush discloses: 

17 a memory storing data and a one-time pad (Bush, page 2, par. 25; page. 3, par. 

18 35. lines 4,5). 

19 an index to synchronize a starting position in the one-time pad (Bush, page 3, 

20 par. 32). 

21 an identification number uniquely associated with the one-time pad (Bush, page 

22 4, pars. 54, 55). 
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1 and a transmitter to transmit the data to the reader (Bush, fig. 6, elems. 614, 

2 602). 
3 

4 Regarding claim 10, Bush discloses: 

5 a generator to generate the one-time pad (Bush, fig. 6, elems. 602, 604; page. 5, 

6 par. 59). 

7 and a receiver to receive data from the data carrier (Bush, fig. 6, elems. 602, 

8 604). 
9 

10 Regarding claim 11, Bush discloses: 

1 1 the data canier of claim 10 wherein the receiver further receives the index from 



12 the data canier to synchronize with the starting position in the one-time pad (Bush, page 

13 3, par. 32; page 4, pars. 45, 53; fig. 4). Bush discloses the one time pad as being 

14 divided into fixed length blocks of bits, or "sheets". The carrier encodes a block of data 

15 with its corresponding sheet from the one time pad, and sends the encoded sheet to the 

16 receiver. That is the signal for the reader to update its Index pointing to the next sheet 

17 from the one time pad. Thus the receiver receives the Index from the data carrier. 
18 

19 Regarding claim 12, Bush discloses: 

20 the data canier of claim 1 0 wherein the data carrier and the reader 

21 communicate via one of the following interfaces: capacitive interface, inductive 

22 interface, electromagnetic interface, optical interface, electrical interface and 
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1 contact interface (Bush, page 5, par. 56). Bush discloses the data carrier embodied as 

2 a PCMCIA device and a contact interface with a receiving device. 
3 

4 Regarding claim 13, Bush discloses: 

5 the data canier of claim 10 wherein the generator generates the one-time 

6 pad by one of the following: a look-up table, and a pseudorandom number 

7 generator operating on a secret key and the identification number of the data 

8 earner (Bush, fig. 6, elems. 602, 604; page. 5, par. 59). Bush discloses the carrier- 

9 receiver Interface being directly attached to processor 604, thus a device comprising a 
10 generator which generates the one time pad via a look-up table ("list"). 

11 



12 Regarding claim 14, Bush discloses: 

1 3 the data earner of claim 9 further comprising a controller to prevent reuse 

14 of bits in the one-time pad (Bush, page 3, par. 33; page 5, par. 65). 
15 

16 Regarding claim 15, Bush discloses: 

1 7 the data carrier of claim 9 further comprising a counter to index to a next bit in the 

18 one-time pad once a bit has been used (Bush, page 3, par. 32, par. 40). Bush discloses 

1 9 a counter to index to the beginning of the next sheet, thus a next bit usable for 

20 encryption, once a previous sheet has been disposed of, marking the advent of a last bit 

21 used for encryption. 
22 
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1 Regarding claim 16, Bush discloses: 

2 the data carrier of claim 9 wherein the data is stored in a first memory and 

3 the one-time pad is stored in a second memory (Bush, fig. 1 ; page 2, par. 25; page 3, 

4 par. 35). Bush discloses the storing of individual blocks of bits, "sheets" of the one time 

5 pad in ROM. Also disclosed is the storing in a second location, physically securing 

6 separately, of software or "data" on the device. 
7 



8 
9 

10 Claim 21 is rejected under 35 U.S.C. 102(b) as being anticipated by 

1 1 IVIenezes et al., Handbook off Applied Cryptography , 

12 

1 3 Regarding claim 21 , Menezes et al. discloses: 

14 providing an identification number (Menezes et al., page 1 93, fig. 6.1 ). Menezes 

15 et al. discloses providing to the cipher generator an number identifying the initial state of 

16 the machine ("identification number"). 

17 providing a secret l<ey (Menezes et al., page 193, fig. 6.1). Menezes et al. 

18 discloses providing a secret key (k). 

1 9 encrypting the identification number with the secret l<ey (Menezes et al., page 

20 193, fig. 6.1). 
21 

22 
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1 Claim Rejections - 35 USC § 103 

2 The following is a quotation of 35 U.S.C. 103(a) which fomis the basis for all 

3 obviousness rejections set forth In this Office action: 

4 (a) A patent may not be obtained though the invention is not identically disclosed or described as set 

5 forth in section 102 of this title, if the differences between the subject matter sought to be patented and 

6 the prior art are such that the subject matter as a whole would have been obvious at the time the 

7 invention was made to a person having ordinary skill in the art to which said subject matter pertains. 

8 Patentability shall not be negatived by the manner in which the invention was made. 
9 

10 Claims 5 and 6 are rejected under 35 U.S.C. 103(a) as being unpatentable 

1 1 over Bush in view of La Porte, "PCMCIA Card and Card Socket Power 

12 Management". 
13 

14 Regarding claim 5, Bush discloses that his data carrier is embodied as a 

15 PCMCIA device. He does not disclose the data carrier of claim 1 further comprising a 

16 power supply that receives energy from a reader via at least one of capacitive coupling, 

17 inductive coupling, electromagnetic coupling, optical coupling, and contact. 

18 La Porte, discloses a description of the PCMCIA device specification. La Porte 

1 9 shows that PCMCIA cards draw power from their host system via capacitive coupling 

20 ('reader') (La Porte, page 1, fig. 1; page 2, par. 3). 

21 It would have been obvious to one of ordinary skill in the art to employ the power 

22 supply design of PCMCIA cards for receiving external energy by La Porte with the 

23 PCMCIA card of Bush. This would have been obvious because one of ordinary skill in 

24 the art would have recognized this to be the specified and typical design and operation 

25 of PCMCIA cards. 
26 
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1 Regarding claim 6, the combination of Bush and La Porte discloses: 

2 The data carrier of claim 1 further comprising a power supply that receives energy from 

3 one of the following: a battery, and a super-capacitor (La Porte, page 1 , fig. 1 ; page 2, 

4 par. 3). 
5 

6 Claims 17-20 are rejected under 35 U.S.C. 103(a) as being unpatentable 

7 over Bush in view of IVIenezes et al., Handbook of Applied Crvptoqraphv - 

8 

9 Regarding claim 17. Bush discloses storing a set of data and a one-time pad, 

1 0 wherein the one-time pad is uniquely associated with an identification number (Bush, 

1 1 page 2, par. 25; page. 3, par. 35, lines 4,5), and synchronizing the one-time pad and an 

12 index value with an external device to establish a starting position in the one time pad 

13 (Bush, page 3, par. 32; page 4, par. 45; fig. 4). Bush also discloses the receiving of a 

14 random skip value from the external device (Bush, page 4, par. 53; page 5. par. 61). As 

15 disclosed an external device can provide the carrier with an checkbook as well as 

16 instructions for randomly varying the starting position of the one time pad. 

17 Bush does not disclose utilizing the one time pad in requesting and receiving 

18 from the external device a number of bits, and if the requested and received bits match, 

19 then continuing to employ the one time pad according to the conditions imposed from 

20 the consumption of the bits of the one time pad during the challenge-response and the 

21 random starting position designated by the external device. 
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1 Menezes et al. discloses a method for authenticating messages from a sender 

2 and receiver and for preventing relay attacks. This challenge-response method 

3 comprises a first entity sending a random number to a second entity, and subsequently 

4 receiving the random number repeated by the second entity to the first. Menezes et al. 

5 discloses the repeated message or random number should be cryptographically bound 

6 or encrypted with a symmetric key so as to prevent misuse by adversaries. If the 

7 second entity correctly responds to the challenge, then the communication shared 

8 between the two entities is deemed 'fresh' or authentic (Menezes et al., pages 397-402, 

9 section 10.3; page 398, "Random numbers", pars. 1-3; page 401). 

10 It would have been obvious to one of ordinary skill in the art to employ the 

1 1 encrypted challenge-response method of Menezes et al. with the one time pad 

12 communications system of Bush involving a data carrier and external device. This 

13 would have been obvious because one of ordinary skill in the art would have been 

14 motivated to provide measures of security, and a secured authentication of the external 

1 5 device to the carrier would provide such measures of security. Thus the combination of 

16 Bush and Menezes et al. discloses the sending a challenge encrypted by the key held 

17 by the carrier ("requesting a number of bits"), receiving the challenge encrypted with the 

18 key held by the external device ("receiving a set of bits"), and comparing the challenge 

19 with response to detemnine authenticity. Since the combination of Bush and Menezes 

20 et al. teaches the encryption of the challenge and response, the combination also 

21 discloses the consumption of bits from the one time pad, and thus the need to 

22 increment the index. 
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1 

2 Regarding claim 18, the combination of Bush and IVIenezes et al. discloses: 

3 generating the one-time pad based on the identification number (Bush, fig. 6, 

4 elems. 602, 604; page. 5, par. 59). Bush discloses the carrier-receiver interface being 

5 directly attached to processor 604, thus a device comprising a generator which 

6 generates the one time pad via a look-up table ("list"), producing the pad by identifying 

7 the check associated with it. 

8 and receiving the index value to synchronize with the starting position in the one- 

9 time pad (Bush, page 3, par. 32; page 4, pars. 45, 53; fig. 4). Bush discloses the one 

10 time pad as being divided into fixed length blocks of bits, or "sheets". The carrier 

1 1 encodes a block of data with its corresponding sheet from the one time pad, and sends 

12 the encoded sheet to the receiver. That is the signal for the reader to update its index 

13 pointing to the next sheet from the one time pad. Thus the receiver receives the index 

14 from the data carrier. 
15 

16 Regarding claim 19, the combination of Bush and Menezes et al. discloses: 

1 7 the method of claim 18 wherein the step of generating comprises 

1 8 encrypting the identification number with a secret key (Bush, page 4, par. 54). As 

19 disclosed by Bush, the electronic checkbook, is a collection of encoded data packets 

20 including the encryption of the identification number. 
21 

22 Regarding claim 20, the combination of Bush and Menezes et al. discloses: 
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1 associating an identification number with a one time pad (Bush, page 2, par. 25; 

2 page. 3, par. 35, lines 4,5). 

3 storing the identification number, one-time pad and data on the data carrier 

4 (Bush, page 2, par. 25; page. 3, par, 35, lines 4,5). 

5 setting an index, wherein the index identifies a next available bit of the one-time 



6 pad (Bush, page 3, par. 32, par. 40). The system of Bush comprises the 

7 encoding/decoding of digital data. Bush discloses that the counter indexes to the next 

8 available position in the one time pad, whereupon a XORing of the bits of the one time 

9 pad and the data will occur. Thus, Bush discloses indexing to a next bit in the one time 
10 pad. 



1 1 transmitting the identification number, the index and a challenge to the 

1 2 reader, wherein the challenge at least requests transmission of bits of the one-time 

13 pad (Bush, page 4, par. 54; fig. 6, elems. 614, 602. 612, 604; also see explanation 

14 regarding claim 17) ; 

1 5 generating the one-time pad in the reader based on the identification number 



16 (Bush, fig. 6, elems. 602. 604; page. 5, par. 59). Bush discloses the carrier-receiver 

17 interface being directly attached to processor 604, thus a device comprising a generator 

18 which generates the one time pad via a look-up table ("list"), producing the pad by 

19 identifying the check associated with it. 

20 transmitting bits of one-time pad, based on the index and challenge and a 

21 random skip value, from the reader to the data carrier and verifying, at the data earner, 

22 that the bits transmitted from the reader correspond to the challenge, and if correct, 
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1 incrementing the index by number of bits in tfie challenge and the skip value, and 

2 encrypting and transmitting at least a portion of the data to the reader (see explanation 

3 regarding claim 17). 
4 

5 



6 Conclusion 
7 

8 The prior art made of record and not relied upon is considered pertinent to 

9 applicant's disclosure: 
10 

1 1 Schneider et al., "Efficient Commerce Protocols Based on One-Time Pads.", 

12 Princeton University, IEEE 12/2000. 
13 

14 

15 A shortened statutory period for reply is set to expire 3 months (not less than 90 

16 days) from the mailing date of this communication. 
17 

1 8 Any inquiry concerning this communication or earlier communications from the 

1 9 examiner should be directed to Jeffery Williams whose telephone number is (571 ) 272- 

20 7965. The examiner can nomially be reached on 8:30-5:00. 

21 If attempts to reach the examiner by telephone are unsuccessful, the examiner's 

22 supervisor, Andrew Caldwell can be reached on (571) 272-3868. The fax phone 
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1 number for the organization where this application or proceeding is assigned is 703- 

2 872-9306. 



4 Patent Application Information Retrieval (PAIR) system. Status information for 

5 published applications may be obtained from either Private PAIR or Public PAIR. 

6 Status information for unpublished applications is available through Private PAIR only. 

7 For more infomriation about the PAIR system, see http://palr-direct.uspto.gov. Should 

8 you have questions on access to the Private PAIR system, contact the Electronic 

9 Business Center (EBC) at 866-217-9197 (toll-free). 
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